Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3233352e302f32342d3234203d3e20383334.roa
File:                     3230342e39332e3233352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          LJcL0kAjhdIv0gZOmaD71ecWNx/acLzhcUm+m49UvYM=
Subject key identifier:   3A:DC:4B:A7:FC:82:77:10:0B:69:8C:7F:A1:B1:8B:BD:7E:E7:BA:BB
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       0ECF05E5A38A601D5DFC2D0D9CB0F443B699D260
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3233352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 20 Apr 2023 00:00:15 +0000
ROA not before:           Wed 19 Apr 2023 23:55:15 +0000
ROA not after:            Thu 18 Apr 2024 00:00:15 +0000
asID:                     834
IP address blocks:        204.93.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:05:e5:a3:8a:60:1d:5d:fc:2d:0d:9c:b0:f4:43:b6:99:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 19 23:55:15 2023 GMT
            Not After : Apr 18 00:00:15 2024 GMT
        Subject: CN=3ADC4BA7FC8277100B698C7FA1B18BBD7EE7BABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:7f:de:f9:d0:ae:cb:9f:6c:54:ee:83:dc:
                    12:a9:d0:08:00:65:c8:5f:83:31:68:31:8e:0d:2b:
                    73:05:e1:db:83:02:bd:72:2b:89:15:df:e7:3f:11:
                    c2:dd:7e:47:45:06:98:80:2b:73:63:55:ab:5d:f0:
                    6b:0d:6e:90:22:38:ae:ad:ae:9f:4c:1b:3b:67:51:
                    42:6f:ae:4d:b6:d6:1b:35:0e:60:3a:a1:6f:aa:e6:
                    1b:0d:24:e2:37:0f:28:ab:14:8c:75:e1:eb:00:55:
                    30:a3:00:00:08:a4:84:66:7a:1c:68:06:0c:eb:e8:
                    9b:da:48:f7:f2:9c:70:25:0a:83:cd:68:41:43:37:
                    08:b1:c6:ac:55:af:c6:50:3e:5a:bf:34:99:b1:c2:
                    2a:07:aa:93:05:d8:da:40:42:87:fc:3f:ad:5e:82:
                    fc:91:aa:62:76:3f:1a:2b:9d:c2:07:28:e3:f0:dd:
                    ba:9c:cf:fb:c0:92:e6:45:9f:99:7e:9b:e5:ff:69:
                    28:60:c4:77:a6:74:72:69:c2:20:03:73:9a:90:36:
                    c7:bd:d8:31:0f:f0:02:ae:e4:fe:64:54:40:84:78:
                    a2:ab:0b:9b:a5:d5:10:09:ea:58:cc:3c:cb:db:7d:
                    b5:33:60:50:c5:ba:a2:87:7b:b3:d3:10:4c:e1:e4:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DC:4B:A7:FC:82:77:10:0B:69:8C:7F:A1:B1:8B:BD:7E:E7:BA:BB
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3233352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:9c:38:e8:59:df:0c:61:21:ed:5a:f2:bd:49:9e:0b:d6:b4:
         8b:3a:1e:e8:c7:a0:a9:ca:6d:12:ba:1b:e8:90:f0:87:e1:7f:
         bd:d6:dc:dd:e6:9a:74:20:c9:00:e0:a4:ac:d2:6e:03:08:40:
         b4:a5:9b:8f:e9:6c:52:cd:9f:41:7d:1b:40:66:47:11:04:7d:
         ce:1e:96:fa:a3:92:c4:97:f0:89:8f:ad:82:21:a9:bb:12:31:
         87:81:c7:cf:a1:9c:f4:2d:45:30:16:9d:5c:46:72:be:da:2c:
         22:4c:94:ea:95:2b:ae:a2:c8:74:d6:5a:d4:0d:32:d9:b9:62:
         95:b0:9e:4b:76:49:ea:7d:6d:64:3d:aa:60:ad:02:53:93:37:
         cc:2d:60:70:aa:e8:a8:97:31:e2:81:c6:bd:d7:da:77:64:81:
         37:24:34:d3:ca:6c:1d:54:52:b8:2d:70:0d:5a:84:7c:d4:cb:
         ec:bb:f1:65:d0:41:0f:e6:47:5b:e4:46:b3:aa:63:46:8e:1c:
         22:01:d0:98:7f:3f:1d:33:fa:a5:40:a1:7d:0e:09:1a:5a:4d:
         8e:71:af:4d:04:02:42:ef:b8:bb:d3:91:59:97:ae:e7:62:62:
         78:77:9d:93:3e:a2:1d:03:a9:6a:c0:f3:45:c3:69:49:46:34:
         76:c5:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----